kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Nov 29, 2021 | Jul 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 29, 2021 | Jul 7, 2021 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-zteUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-lgUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade gfs2-kmp-preemptUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kselftests-kmp-preemptUpgrade kernel-docs-htmlUpgrade kernel-preemptUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade dtb-alUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade kernel-preempt-extraUpgrade dtb-sprdUpgrade kernel-preempt-develUpgrade dlm-kmp-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-preempt-optionalUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade dtb-exynosUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-preempt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-devel | Jul 23, 2021 | Jul 7, 2021 |
| Ubuntu | — | Upgrade linux-azure-5.11Upgrade linux-oracle-5.11Upgrade linux-fipsUpgrade linux-aws-5.11Upgrade linux-aws-fipsUpgrade linux-gcp-5.11Upgrade linux-azure-fipsUpgrade linux-gcp-fips | Nov 19, 2024 | Jul 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub